Abstract 


The present invention relates to a method and networl< element for providing se- 
cure access to a pacl^et data network, wherein a first source information is derived 
from a message received from a terminal device (40, 60), and is compared with a 
5 second source information derived from a packet data unit used for conveying said 
message, or derived from a security association set up between the terminal de- 
vice and the data network. A protection processing for protecting the packet data 
network from a fraudulent user attack is then initiated based on the comparing re- 
sult. Thereby, a simple and efficient protection mechanism can be provided with- 
10 out sending any additional information or providing any additional fields In the 
message. 
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